Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/323830343a353834383a3a2f33322d3332203d3e20323638313139.roa
File:                     323830343a353834383a3a2f33322d3332203d3e20323638313139.roa (raw, json)
Hash identifier:          Ty/Ov7N6nUO+Z2boON1ghu/VRG2gOLQzb7/jm/jEHWQ=
Subject key identifier:   CE:93:2A:3A:41:67:15:8B:8B:04:4B:51:B4:BC:D5:74:78:AC:FF:1C
Certificate issuer:       /CN=05F9FA82E6DC844616C6E65830AA93270618DA3A
Certificate serial:       57A535A7D7E3F520D971E8012F215A8CAE6AC82C
Authority key identifier: 05:F9:FA:82:E6:DC:84:46:16:C6:E6:58:30:AA:93:27:06:18:DA:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05F9FA82E6DC844616C6E65830AA93270618DA3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/323830343a353834383a3a2f33322d3332203d3e20323638313139.roa
Signing time:             Wed 29 May 2024 14:37:58 +0000
ROA not before:           Wed 29 May 2024 14:32:58 +0000
ROA not after:            Wed 28 May 2025 14:37:58 +0000
asID:                     268119
IP address blocks:        2804:5848::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a5:35:a7:d7:e3:f5:20:d9:71:e8:01:2f:21:5a:8c:ae:6a:c8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05F9FA82E6DC844616C6E65830AA93270618DA3A
        Validity
            Not Before: May 29 14:32:58 2024 GMT
            Not After : May 28 14:37:58 2025 GMT
        Subject: CN=CE932A3A4167158B8B044B51B4BCD57478ACFF1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:95:ac:f1:8f:89:7e:62:0d:a0:63:3c:95:
                    62:fc:5d:96:9a:fb:0a:ee:18:70:b8:99:03:e8:b2:
                    88:02:b2:7d:72:a2:35:b1:74:da:46:43:38:32:0a:
                    eb:6f:c6:c0:48:5b:99:14:ae:78:93:5f:ed:e9:2b:
                    27:93:30:02:12:1b:8b:1c:3f:65:f6:42:19:21:ee:
                    d9:c8:c3:2b:01:63:6a:80:b3:25:b6:b8:90:81:3a:
                    4e:e1:56:6a:ac:46:ac:12:41:05:e9:18:1e:a7:0c:
                    aa:4a:72:ab:96:0d:c7:ce:35:99:74:77:df:65:c7:
                    bf:c0:71:a0:d4:8f:93:a4:72:70:fa:0a:87:fa:79:
                    f7:47:b2:f6:ac:1f:0d:30:fa:19:f6:a6:3e:07:d5:
                    4a:02:c3:81:87:75:ba:50:6d:7a:1a:ff:86:37:f4:
                    76:47:fb:c2:22:2e:86:a9:79:9f:a8:06:dc:c4:14:
                    1c:1d:77:05:be:81:45:96:d2:17:d4:78:89:85:e2:
                    c3:89:a9:1a:90:2e:e7:00:b3:63:ff:5b:51:a6:ac:
                    b2:85:5c:52:6d:40:a6:26:4b:15:5c:68:bf:c2:8e:
                    ad:a5:ed:34:5b:f0:7b:c6:7f:68:f6:a7:d4:6c:fb:
                    01:4d:dc:12:0c:f8:d4:3d:bd:ca:a6:3c:a3:46:be:
                    0d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:93:2A:3A:41:67:15:8B:8B:04:4B:51:B4:BC:D5:74:78:AC:FF:1C
            X509v3 Authority Key Identifier:
                keyid:05:F9:FA:82:E6:DC:84:46:16:C6:E6:58:30:AA:93:27:06:18:DA:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/05F9FA82E6DC844616C6E65830AA93270618DA3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05F9FA82E6DC844616C6E65830AA93270618DA3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iLqf64dAM1wQ6tEEcProPnPKpK86ZSr1icdqAwuZJaS/0/323830343a353834383a3a2f33322d3332203d3e20323638313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5848::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:1b:5a:4d:5e:76:a7:6f:64:4b:3c:74:da:77:be:7a:7b:7e:
         34:14:7b:6e:45:33:73:bd:7a:6f:c2:ba:3e:76:96:97:ef:68:
         9d:ac:5d:32:21:a2:48:db:77:87:90:7c:d0:0c:83:5e:8b:0a:
         8b:88:86:9c:ef:2d:1b:a2:da:ed:f5:6a:c0:b9:d6:50:2e:c1:
         ff:eb:86:24:e4:82:95:a9:22:84:61:bb:ea:55:be:ab:05:0c:
         bb:f9:cb:64:74:40:80:c0:80:52:aa:25:3f:8f:6f:f6:b1:c2:
         d8:71:8a:fa:17:f6:43:ab:d5:c6:1a:29:80:42:49:e3:de:f1:
         96:34:01:68:1f:a7:28:96:b8:2f:5b:85:9e:6c:33:00:30:3c:
         9a:f0:bb:44:55:a2:b2:1d:36:a9:00:6d:19:60:27:fc:58:71:
         cc:5c:3d:6d:e9:88:95:5d:dd:42:a9:44:09:16:53:89:3b:86:
         16:8c:1a:16:d2:62:43:26:cf:33:3c:4f:d8:c9:14:84:2c:82:
         8a:a6:dd:3a:35:8a:cb:c8:bf:e4:3c:79:75:98:c8:33:64:2a:
         65:ba:86:b3:ee:2c:8b:3c:3d:e5:47:f5:d8:d6:e5:97:3f:3f:
         86:86:11:52:7a:c2:ff:1b:63:95:ca:47:63:e2:9c:fe:e8:ef:
         35:18:b4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----